1015 matches found
Security Bulletin: A vulnerability in Apache Commons FileUpload affects the IBM Performance Management product (CVE-2016-1000031)
Summary Apache Commons FileUpload could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileItem class of the FileUpload library. A remote attacker could exploit this vulnerability to execute arbitrary code under the context of t...
Security Bulletin: Vulnerability in Apache Commons FileUpload affects IBM Cúram Social Program Management (CVE-2016-1000031)
Summary IBM Cúram Social Program Management uses the Apache Commons FileUpload Library. Apache Commons FileUpload, as used in Novell NetIQ Sentinel and other products, could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileIte...
Micro Focus NetIQ Identity Reporting Cross-Site Scripting Vulnerability
Micro Focus NetIQ Identity Reporting is a suite of identity reporting modules for use in NetIQ Identity Manager from Micro Focus UK. A security vulnerability exists in versions prior to Micro Focus NetIQ Identity Reporting 5.5 Service Pack 1. An attacker could exploit the vulnerability to inject...
Design/Logic Flaw
NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...
CVE-2017-9275
NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...
CVE-2017-9275
NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...
CVE-2017-9275 NetIQ Identity Reporting XSS exposure
NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...
CVE-2017-9275
NetIQ Identity Reporting is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 5.5 Service Pack 1. Connected sources confirm the affected product and version range; no exploit details are provided. Remediation is to upgrade to 5.5 Service Pack 1 or later. The documents do...
CVE-2017-9275: Improper Neutralization of Input During Web Page Generation
NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...
Micro Focus NetIQ Identity Manager Information Disclosure Vulnerability
Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity...
Micro Focus NetIQ Identity Manager user console redirection vulnerability
Micro Focus NetIQ Identity Manager is an identity management solution from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. user console is one of the user console...
Information disclosure
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
CVE-2018-7674
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7676
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
CVE-2018-7676
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
CVE-2018-7674
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
Design/Logic Flaw
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7676
The CVE refers to Micro Focus NetIQ Identity Manager. In versions prior to 4.7, when userapp with log/trace enabled, there is an information disclosure vulnerability that may leak sensitive data. Impact is described as a confidentiality breach (partial) with no integrity/availability impact state...
CVE-2018-7674
The CVE concerns NetIQ Identity Manager’s user console vulnerability: URL redirection in versions before 4.7. Affected element is the user console; the underlying flaw enables redirection to external sites. The documents state the impact as the ability to direct users to other Web sites, with no ...